Access Control Fundamentals
In information security, access control is imperative to ensure confidentiality, integrity, and availability. Controlling who has access to a system and the breadth of access a user has is vital to ensure the security of systems and data on the systems. Read this article to understand the terms access control, access, subject, and resource. Note the challenges, the principles, the criteria, and the practices used in access control.
8. Access Control Categories
Access controls can be implemented at various layers of a network and individual systems.
The access controls can be classified into three layers or categories, each category having different access control mechanisms that can be carried out manually or automatically.
- Administrative Controls
- Physical Controls
- Technical or Logical Controls
Each category of access control has several components that fall within it, as described.